2019-10-24

2019-10-25

2019-10-26

All (2) Critical (8) High (21) Medium (12) Low (2)

CVE-2019-4395 Oct 25, 17:15 LOW Monitor

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a local user to obtain sensitive information from temporary script files. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure IBM Cloud Orchestrator

NVD

CVSS 3.1

3.3

EPSS

0.3%

CVE-2019-4394 Oct 25, 17:15 LOW Monitor

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to send email. Rated low severity (CVSS 2.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure IBM Cloud Orchestrator

NVD

CVSS 3.1

2.3

EPSS

0.3%